GRC FlowGRC Flow
  • Inside GRC Flow
  • Services
  • Packs
  • Encyclopedia
  • FAQ
FeedbackSign inGet started
  • Inside GRC Flow
  • Services
  • Packs
  • Encyclopedia
  • FAQ
  • Share feedback
  • Sign in

Packs

Several services in one pack, run in the order you choose; each deliverable can feed the next services and every version is kept.

GRC Flow

Governance, risk, compliance and IT operations services whose deliverables feed each other.

Product

  • Inside GRC Flow
  • Services
  • Packs
  • Encyclopedia
  • FAQ
  • About

Frameworks

  • ISO/IEC 27001
  • GDPR
  • NIS2
  • DORA
  • HIPAA
  • PCI DSS

Legal

  • Terms
  • Privacy
  • Legal notice

© GRC Flow

  • Inside GRC Flow
  • Services
  • Packs
  • Encyclopedia
  • FAQ
2 services

Policies & Procedures

Build a coherent set of policies and procedures for any domain, each under the title and sections you write.

  1. 1Company profile
  2. 2Policies
  3. 3Procedures
  4. 4Documentation package export
Start this pack
6 services

Risk Management Pack

From the assets to the summary report: risks identified, assessed, registered and treated.

  1. 1Company profile
  2. 2Asset identification
  3. 3Risk identification
  4. 4Risk assessment
  5. 5Risk register
  6. 6Risk treatment plan
  7. 7Risk summary report
Start this pack
5 services

Compliance Assessment Pack

Evaluate compliance maturity and get a prioritised improvement roadmap.

  1. 1Company profile
  2. 2Compliance questionnaire
  3. 3Control register
  4. 4Gap assessment
  5. 5Non-conformity report
  6. 6Remediation roadmap
Start this pack
11 services

ISO 27001 Certification Pack

End-to-end preparation from context analysis to certification readiness.

  1. 1Company profile
  2. 2Context analysis (SWOT, PESTEL, interested parties)
  3. 3Scope definition
  4. 4Policies & procedures
  5. 5Risk assessment
  6. 6Risk register
  7. 7Risk treatment plan
  8. 8Statement of Applicability
  9. 9Evidence register
  10. 10Gap assessment
  11. 11Non-conformities & improvements
  12. 12Certification readiness review
Start this pack
4 services

Network Design & Deployment Pack

Design a network from its addressing plan to ready-to-review device configurations and firewall rules, documented end to end.

  1. 1Company profile
  2. 2IP addressing plan
  3. 3Network documentation
  4. 4Device configurations
  5. 5Firewall rules
Start this pack
4 services

Network Security Audit Pack

Document the network, audit it against its objectives and standards, review the firewall rules and plan the remediation.

  1. 1Company profile
  2. 2Network documentation
  3. 3Network audit
  4. 4Firewall rule review
  5. 5Remediation roadmap
Start this pack
4 services

Managed Network Service Onboarding Pack

Take over a customer network as a managed service: document it and agree responsibilities and service levels.

  1. 1Company profile
  2. 2Network documentation
  3. 3IP addressing plan
  4. 4Responsibilities (RACI)
  5. 5Service level agreement
Start this pack
7 services

Vulnerability Management Pack

The programme, the register, priorities, remediation, exceptions, verification and the KPIs, each one able to reuse the IDs, dates and owners of the others.

  1. 1Company profile
  2. 2Vulnerability management plan
  3. 3Vulnerability register
  4. 4Prioritisation and triage
  5. 5Remediation plan
  6. 6Exception and risk acceptance
  7. 7Remediation verification
  8. 8KPI report
Start this pack
5 services

EBIOS Risk Management Pack

The five workshops of the EBIOS Risk Manager method, each one able to reuse the deliverables of the others: scoping and baseline, threats, strategic scenarios, attack paths and the treatment plan.

  1. 1Company profile
  2. 2Workshop 1: Scoping and Security Baseline
  3. 3Workshop 2: Risk Sources and Objectives
  4. 4Workshop 3: Strategic Scenarios
  5. 5Workshop 4: Operational Scenarios
  6. 6Workshop 5: Risk Treatment
Start this pack
7 services

NIST Risk Management Framework Pack

The seven steps of the NIST RMF for one system, each one able to reuse the deliverables of the others: preparation, categorization, control selection, implementation, assessment, authorization package and continuous monitoring.

  1. 1Company profile
  2. 2Prepare: Preparation & Context
  3. 3Categorize: System Categorization
  4. 4Select: Security Control Selection
  5. 5Implement: Control Implementation Record
  6. 6Assess: Control Assessment Plan & Results
  7. 7Authorize: Authorization Package
  8. 8Monitor: Continuous Monitoring Plan
Start this pack
Your services

Custom pack

Choose the services you need, the runs of each and the saved versions.

Build my pack